Vulnerabilities

TI-2026-62521 CVE-2026-92780 · GHSA-h7r9-wrf2-gr7g

KnowStreaming through 3.4.1 Missing Authorization on the REST API

HIGH 73

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00523 Published 2026-09-16 No fix listed CWE-862

TI-2024-10122 CVE-2024-10919 · GHSA-7v36-f3gj-qcg5

didi Super-Jacoco triggerUnitCover os command injection

MEDIUM 57

A vulnerability has been found in didi Super-Jacoco 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05135 Published 2024-11-06 No fix listed CWE-74

TI-2024-09663 CVE-2024-10435 · GHSA-3x29-r8jj-qr5c

didi Super-Jacoco triggerEnvCov command injection

MEDIUM 57

A vulnerability was found in didi Super-Jacoco 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01232 Published 2024-10-28 No fix listed CWE-77

TI-2024-09433 CVE-2024-10173 · GHSA-vxgx-3742-3jj5

didi DDMQ Console Module improper authentication

HIGH 70

A vulnerability has been found in didi DDMQ 1.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00712 Published 2024-10-20 No fix listed CWE-287

TI-2023-04589 CVE-2023-4984 · GHSA-hfpv-wwcx-9hg3

didi KnowSearch 1 credentials storage

LOW 30

A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00662 Published 2023-09-15 No fix listed CWE-256